Azure Linux 4.0 Preview: Fedora-Based Microsoft OS for Azure VMs

Microsoft publicly made Azure Linux 4.0 available in preview in June 2026 for Azure Virtual Machines and VM Scale Sets, turning a once mostly internal Microsoft cloud distribution into a free, openly developed Fedora-based Linux platform for enterprise workloads. The headline is not that Microsoft “likes Linux” now; that argument was settled years ago inside Azure’s balance sheet. The real story is that Microsoft is trying to make its own Linux boring, inspectable, and operationally acceptable enough for the same administrators who already trust Red Hat, Ubuntu, and SUSE. That is a much harder trick than publishing an ISO.

Digital concept graphic showing Azure cloud, layered Linux filesystem, and package upgrade to dnf5 with OpenSSL security.Microsoft’s Linux Moment Is No Longer Symbolic​

For longtime Windows watchers, Azure Linux 4.0 invites the obvious historical contrast: the company that once treated Linux as a strategic threat now ships a Linux distribution of its own. But that framing is too easy, and in 2026 it is mostly a nostalgia act. Microsoft has already spent years contributing to the Linux kernel, running Linux-heavy infrastructure in Azure, building WSL into Windows, and selling managed services that depend on open-source stacks.
What changes with Azure Linux 4.0 is not Microsoft’s attitude toward Linux. What changes is the audience. A distribution that began life as CBL-Mariner and quietly powered Microsoft-controlled infrastructure is being pushed outward as something customers can evaluate directly, deploy in Azure VMs, and eventually treat as another supported base image in the cloud estate.
That distinction matters because internal infrastructure distributions live by different rules. They can assume Microsoft’s own tooling, Microsoft’s own deployment cadence, and Microsoft’s own tolerance for breakage. A public enterprise Linux distribution has to survive contact with third-party scanners, compliance teams, auditors, automation scripts, vendor support matrices, and administrators who are paid to distrust surprises.
Azure Linux 4.0 is Microsoft’s attempt to cross that line without pretending to be a desktop Linux, a community generalist distribution, or a Red Hat clone. It is a cloud operating system with a narrow mission: give Azure a hardened, transparent, Microsoft-maintained Linux base that fits the way Microsoft runs modern infrastructure.

The Fedora Base Is a Strategic Concession, Not a Rebrand​

The most interesting technical decision in Azure Linux 4.0 is its move to a Fedora 43 foundation with a declarative overlay model. That sounds like distribution plumbing, but it is really a governance statement. Microsoft is saying it does not want to look like a black-box downstream vendor rebuilding the Linux world in private.
Earlier versions of Azure Linux had already been open source, but Azure Linux 4.0 goes further by making Microsoft’s deviations from upstream Fedora visible in a public repository. In practical terms, the company is trying to document what it changes, why it changes it, and how those changes sit on top of upstream work. That is the kind of boring transparency that infrastructure buyers increasingly demand.
The Fedora choice also signals where Microsoft wants compatibility gravity to sit. Fedora is upstream of the Red Hat Enterprise Linux ecosystem, and adopting dnf5 brings Azure Linux closer to the package-management habits of administrators familiar with Fedora, CentOS Stream, and RHEL-adjacent environments. Replacing tdnf removes one more Microsoft-specific wrinkle from the day-to-day experience.
That does not make Azure Linux “Fedora for Azure.” It is still a Microsoft-maintained operating system tuned for Azure infrastructure, with Microsoft’s priorities baked into kernel choices, packaging, security defaults, and release engineering. But it does mean Microsoft is betting that alignment with upstream norms will make Azure Linux easier to inspect, easier to automate, and easier to explain in a change-control meeting.
The overlay model is the real tell. It acknowledges that trust in Linux is not earned by saying “open source” loudly; it is earned by making downstream changes visible enough that other engineers can challenge them. For Microsoft, a company still carrying decades of institutional skepticism from parts of the open-source world, that is not cosmetic. It is table stakes.

This Is Not Microsoft’s Ubuntu Moment​

Azure Linux 4.0 is not aimed at people looking for a new daily-driver desktop distribution. It is not trying to win over users who want GNOME polish, laptop battery tuning, gaming tweaks, or a friendly installer. Its natural habitat is the headless, automated, policy-controlled world of cloud servers, containers, Kubernetes nodes, and scale-set images.
That restraint is important. The Linux distribution market is already crowded, but it is crowded in different ways depending on the workload. Desktop Linux has its own politics and priorities. Enterprise server Linux has vendor relationships, certification pipelines, and long support windows. Cloud-native Linux has a different set of anxieties: minimal footprint, fast patching, reproducible builds, supply-chain metadata, and low operational variance.
Microsoft is chasing the third category first. Azure Linux already has credibility inside Microsoft because it powers production services including Azure Kubernetes Service, Azure SQL, and Azure Cosmos DB. Microsoft has also pointed to large-scale migrations by LinkedIn and Databricks as evidence that the platform can handle serious infrastructure without turning into a science project.
That internal pedigree helps, but it is not the same as public adoption. A distribution can run beautifully inside one company’s carefully controlled environment and still struggle as a customer-facing product. Public users bring weird automation, brittle dependencies, old security agents, custom compliance scripts, and workload owners who ask why their vendor only certifies on Ubuntu LTS or RHEL.
So Microsoft is not merely releasing an operating system. It is asking enterprises to accept another base image into an already crowded support matrix. That is where Azure Linux 4.0’s narrow Azure-first positioning becomes both its strength and its constraint.

Azure Gets a Native Linux Control Plane for the AI Era​

The timing is not accidental. Microsoft is framing Azure Linux 4.0 around cloud-native and AI workloads, and that tells us where the operating system fits in the company’s broader infrastructure story. AI infrastructure is not only about GPUs and model APIs; it is about the operational substrate underneath the clusters, schedulers, drivers, containers, telemetry, and update mechanisms.
Linux dominates that world. Windows Server remains important, especially for Microsoft-centric enterprise workloads, Active Directory-adjacent systems, .NET deployments, and hybrid environments. But the gravitational center of Kubernetes, containers, and AI training or inference infrastructure is Linux.
Azure Linux gives Microsoft a distribution it can tune around that reality without waiting for another vendor’s priorities. Kernel 6.18 LTS, updated Hyper-V integration, GPU and AI accelerator support, OpenSSL 3.5, signed packages, and software bills of materials are not glamorous consumer features. They are the infrastructure vocabulary of modern cloud operations.
The SBOM angle is especially notable. Enterprise buyers are now trained to ask not just whether software is patched, but what exactly is inside it. That pressure comes from supply-chain attacks, compliance mandates, software provenance programs, and the increasingly awkward reality that many organizations deploy thousands of Linux instances without a clean inventory of what those systems contain.
Azure Linux 4.0 tries to answer that anxiety at the distribution level. A Microsoft-maintained image with signed packages and release-level SBOMs gives Azure customers a story they can hand to security teams. It does not eliminate supply-chain risk, but it makes the risk more legible.

The Package Manager Switch Is a Small Change With a Large Message​

The move from tdnf to dnf5 may sound like the sort of change only distribution maintainers could love. In reality, it is one of the most user-facing decisions in the release. Package managers are where operating-system philosophy turns into muscle memory.
tdnf made sense for earlier Microsoft-controlled use cases, particularly in lightweight environments where the company wanted a small package manager with familiar semantics. But for public adoption, a Microsoft-specific tool becomes friction. Every internal script, Dockerfile, runbook, and automation pipeline that has to learn a special package manager becomes another reason to choose something else.
dnf5 reduces that friction. It gives Azure Linux a more familiar surface area for admins coming from Fedora and Red Hat-derived ecosystems. It also makes the distribution feel less like a Microsoft island and more like a participant in an existing Linux operational culture.
That does not mean compatibility is automatic. Microsoft is already warning that scripts and CI pipelines that call tdnf need to be updated before moving to Azure Linux 4.0. That is the sort of migration detail that separates a press release from production reality. The upgrade path will be manageable for disciplined teams and annoying for teams that have hard-coded assumptions into years of automation.
Still, the direction is clear. Microsoft wants Azure Linux 4.0 to feel less exotic. The company is not asking administrators to learn an entirely new Linux worldview; it is trying to make Azure Linux understandable through the tools they already know.

Public Preview Is a Warning Label, Not a Marketing Detail​

One detail should not get buried: Azure Linux 4.0 is in public preview, and Microsoft’s own documentation describes it as intended for evaluation and testing rather than production deployment. That caveat matters. The distribution may already have deep internal lineage, but this version is still being presented as a preview for customers.
That creates a tension in how the release is being discussed. On one hand, Microsoft can credibly say Azure Linux is not a toy. The platform’s roots go back years, and Microsoft has used earlier versions in real production services. On the other hand, Azure Linux 4.0 specifically is not yet the conservative production choice for most enterprises.
For administrators, the sane interpretation is straightforward: test it now, standardize later. Build images, try configuration-management tools, validate security agents, examine package availability, run benchmark workloads, and see how the distribution behaves under your organization’s patching and monitoring model. But do not confuse public availability with a green light to move regulated production systems overnight.
That distinction is especially important because Linux distributions are not judged only at install time. They are judged six months later, when a kernel update collides with a vendor module, an OpenSSL change breaks an old dependency, or an audit asks whether every package in an image can be traced and justified. Azure Linux 4.0’s preview period is where those questions should be made painful on purpose.
The best public previews are not victory laps. They are controlled collisions between vendor assumptions and customer reality. Microsoft needs that collision if Azure Linux is going to become more than the default answer for workloads Microsoft already controls.

The Competitive Target Is Operational Gravity​

Azure Linux 4.0 will inevitably be compared with Ubuntu, Red Hat Enterprise Linux, SUSE Linux Enterprise, Debian, Oracle Linux, and cloud-native minimal images. But Microsoft’s most important competitive target may not be any one distribution. It is inertia.
Enterprises standardize on operating systems because every additional base image creates work. Security teams need baselines. Platform teams need patch pipelines. Developers need documentation. Procurement may need support agreements. Incident responders need to know where logs live, which services are enabled, and how rollback works.
That inertia is powerful, and Microsoft knows it. Azure Linux’s best chance is not to persuade every enterprise that it is the best Linux distribution in the abstract. Its best chance is to become the most convenient and policy-aligned Linux distribution for workloads that already live deeply inside Azure.
That is why VM and VM Scale Set availability matters. This is not just a GitHub project for curious admins. It is being placed where Azure customers actually provision infrastructure. When AKS support arrives, the argument becomes sharper still: if Microsoft can provide a hardened host OS aligned with Azure’s managed Kubernetes service, some organizations will prefer the reduced vendor boundary.
WSL support, when it arrives, could serve a different purpose. It would not make Azure Linux a desktop operating system, but it could give developers a local approximation of the server environment they deploy into. That matters for teams trying to reduce the gap between development laptops, CI runners, container builds, and production hosts.
The distribution’s future will depend less on philosophical arguments about open source and more on whether Microsoft can make it the path of least resistance. In enterprise IT, convenience is often the most underrated form of power.

Windows Server Is Not Being Replaced, but the Center of Gravity Is Moving​

Every time Microsoft does something serious with Linux, someone asks whether Windows Server is being quietly retired. That is the wrong question. Microsoft does not need to replace Windows Server for Azure Linux to be strategically important.
Windows Server still anchors a large world of enterprise applications, identity infrastructure, management tooling, and Microsoft-aligned workloads. It remains central to hybrid IT and to organizations that have spent decades building around Windows administration models. Azure Linux does not erase that.
What it does do is expose the bifurcation inside Microsoft’s infrastructure business. Windows remains a product and platform with deep enterprise commitments. Linux is the substrate for much of modern cloud-native infrastructure. Microsoft has to win in both worlds, and Azure Linux is an admission that renting other people’s Linux distributions is not enough for every scenario.
This is not ideological. It is economic and operational. If Microsoft controls more of the host operating system in Azure, it can optimize performance, security, patch timing, telemetry, and integration. If customers adopt that operating system, Microsoft gains more influence over the stack without forcing those customers into Windows.
That may make some open-source purists uncomfortable, but it is also the normal shape of cloud competition. Amazon has Amazon Linux. Google has Container-Optimized OS and other curated images for its infrastructure. Microsoft having a cloud-optimized Linux distribution is not an oddity; the oddity is that it took this long for the company to put the strategy so plainly in front of customers.

The Open-Source Test Is Governance, Not GitHub​

Microsoft has learned the language of open source. The harder question is whether Azure Linux 4.0 will satisfy open-source expectations when the incentives get messy. Publishing code is the easy part. Sustaining an ecosystem is harder.
The Fedora-based overlay model is a strong start because it gives outsiders a clearer view into what Microsoft changes. But transparency is not the same as community governance. Azure Linux remains a Microsoft-maintained distribution serving Microsoft’s cloud strategy. That does not make it illegitimate, but it does define the power structure.
The practical question is how Microsoft handles feedback that conflicts with Azure’s priorities. Will customer-reported issues flow back upstream where appropriate? Will Microsoft maintain clear patch timelines and lifecycle guarantees? Will external contributors feel like participants or spectators? Will the public repository be a living engineering surface or mostly a publication channel?
Those questions will matter more as adoption grows. A distribution used mainly by Microsoft can optimize for Microsoft. A distribution used by customers must develop muscles for communication, compatibility promises, and public accountability. The moment enterprises build production images on Azure Linux, Microsoft inherits all the social obligations that come with being an operating-system vendor.
There is also a trust paradox here. Microsoft’s name gives Azure Linux credibility with some enterprise buyers and raises suspicion among some open-source veterans. The only durable answer is consistent behavior over time: visible patches, clear documentation, upstream engagement, predictable support, and a willingness to explain the tradeoffs rather than hide them.

The Security Pitch Is Strongest When It Stays Modest​

Azure Linux 4.0’s security story is compelling because it is concrete. Signed packages, SBOMs, modern cryptography, a current long-term kernel, and a hardened Azure-focused baseline are exactly the kinds of features security teams want from infrastructure images. The distribution is not selling magic; it is selling a better-controlled starting point.
That modesty matters. No operating system eliminates risk, and cloud-optimized Linux distributions can still be misconfigured, overprivileged, poorly patched, or undermined by vulnerable applications. The useful claim is not that Azure Linux makes workloads secure. The useful claim is that it may make the base operating system easier to reason about inside Azure.
The OpenSSL 3.5 inclusion, with post-quantum cryptography support, also points toward the next compliance wave. Most organizations are not ready for broad post-quantum migration, and many still struggle with ordinary certificate hygiene. But vendors are already preparing infrastructure layers for a world in which cryptographic agility becomes a board-level concern.
For sysadmins, the immediate value is less futuristic. The question is whether Azure Linux can reduce the number of custom exceptions in vulnerability-management reports. If Microsoft can ship timely fixes, provide clear package metadata, and keep images lean, administrators get fewer moving parts and better evidence for auditors.
That is not glamorous, but neither is most successful infrastructure. The best operating system in a cloud environment is often the one nobody has to think about during an incident.

Developers Get a Narrower Target, and That May Be the Point​

Developers often experience Linux distribution choice as background noise until something breaks. A package name differs, a library version lags, a container behaves differently on the host, or a local build does not match production. Azure Linux 4.0’s appeal to developers is not breadth; it is specificity.
If a team is building for Azure-hosted infrastructure, a Microsoft-maintained base image can become a useful target. That is especially true if Azure Linux becomes available across VMs, AKS, WSL, and image-building pipelines in a coherent way. The more places the same assumptions hold, the less time teams spend translating between environments.
But that advantage depends on ecosystem depth. Developers will ask whether their language runtimes, agents, SDK dependencies, security tools, CI runners, and vendor packages work cleanly. A lean distribution is valuable until it becomes a scavenger hunt for missing packages.
Microsoft’s challenge is to keep Azure Linux small without making it austere. Cloud images benefit from minimalism, but enterprise users still need enough compatibility to avoid constant custom packaging. The dnf5 move helps here because it aligns with a broader package ecosystem, but Microsoft will still have to decide what belongs in its repositories and what customers must bring themselves.
There is a lesson from containers: smaller bases are attractive until maintenance becomes someone else’s unpaid job. Azure Linux will need to prove that its minimalism reduces work rather than redistributing it to platform teams.

Azure Linux Makes Microsoft More Accountable for Linux on Azure​

The most consequential part of Azure Linux 4.0 may be organizational. When customers run Ubuntu or RHEL on Azure, Microsoft shares responsibility with Canonical, Red Hat, or another vendor. When customers run Azure Linux, the line points more directly at Microsoft.
That can be good for customers. Fewer vendor boundaries can mean faster troubleshooting, clearer escalation paths, and better integration with Azure features. If a kernel issue affects Azure VM behavior, Microsoft owns both the cloud platform and the distribution. That should reduce finger-pointing.
It also raises expectations. Customers will not tolerate a Microsoft-maintained Linux that lags on security updates, lacks documentation, or behaves unpredictably across Azure services. If Microsoft wants the benefits of controlling the stack, it also gets the blame when the stack fails.
This is where the Databricks and LinkedIn examples are useful but incomplete. Large internal or close-partner migrations demonstrate scale, but external customers need evidence of repeatability. They need lifecycle documentation, support commitments, migration guides, and proof that ordinary enterprises—not just hyperscale engineering organizations—can operate the distribution successfully.
The next phase, then, is not just technical. It is commercial and operational. Microsoft has to decide how Azure Linux fits into support plans, enterprise agreements, compliance programs, partner certifications, and managed-service defaults. That is where a distribution becomes a platform.

The Real Azure Linux Checklist Is Shorter Than the Press Release​

Azure Linux 4.0 is important because it turns Microsoft’s internal Linux competence into something customers can inspect and potentially adopt. But the release should be read as the beginning of a product maturity cycle, not the end of one. For WindowsForum readers, the practical takeaways are sharper than the branding.
  • Azure Linux 4.0 is publicly available in preview, but Microsoft positions it for evaluation and testing rather than broad production deployment today.
  • The Fedora 43 foundation and public overlay model are designed to make Microsoft’s downstream changes more visible and easier to audit.
  • The shift from tdnf to dnf5 should improve familiarity for administrators from Fedora and Red Hat-adjacent environments, but it can break automation that assumes the older package manager.
  • Azure VM and VM Scale Set support are available first, while AKS and WSL support are planned and could make the distribution more useful across development and production workflows.
  • Signed packages, release SBOMs, OpenSSL 3.5, and a current LTS kernel make the security pitch concrete, but they do not remove the need for disciplined patching and configuration management.
  • Azure Linux is not a Windows Server replacement story; it is a sign that Microsoft wants deeper control over the Linux layer that already underpins much of modern Azure.
Microsoft’s old Linux story was about conversion; its new one is about control, transparency, and operational leverage. Azure Linux 4.0 will not win because it is surprising that Microsoft ships Linux, because it no longer is. It will win only if it becomes the most predictable Linux choice for Azure workloads, boring enough for auditors, familiar enough for administrators, and open enough that the community can see what Microsoft is doing before the next outage or supply-chain scare makes that visibility matter.

References​

  1. Primary source: Open Source For You
    Published: Mon, 29 Jun 2026 12:48:21 GMT
  2. Official source: opensource.microsoft.com
  3. Official source: learn.microsoft.com
  4. Related coverage: windowslatest.com
  5. Related coverage: cultura-informatica.com
  6. Related coverage: prolifics.com
  1. Related coverage: securityonline.info
  2. Related coverage: linuxjust4u.com
  3. Related coverage: windowscentral.com
  4. Related coverage: techradar.com
  5. Official source: marketingassets.microsoft.com
  6. Official source: download.microsoft.com
  7. Related coverage: nec.com
  8. Official source: cdn-dynmedia-1.microsoft.com
 

Back
Top